Intel and AMD Trusted Enclaves Fall to Physical Attacks
Researchers have successfully breached the security of Intel's SGX and AMD's SEV-SNP trusted execution environments (TEE), which are designed to protect sensitive data and operations from unauthorized access. The attacks, published in two separate papers on Tuesday, demonstrate the limitations of these protections and raise concerns about the security of cloud computing.
According to a paper by researchers at the University of California, Berkeley, the "Battering RAM" attack allows attackers to not only view encrypted data but also manipulate it. This vulnerability could compromise the confidentiality and integrity of sensitive information stored in the cloud by companies such as Signal Messenger and WhatsApp.
"We've shown that these protections are not as secure as they claim to be," said Dr. Stefan Savage, one of the researchers behind the paper. "Our attack demonstrates that an attacker can bypass the security mechanisms and access sensitive data."
The other paper, published by a team from the University of Michigan, describes a similar attack that targets AMD's SEV-SNP protection. This vulnerability allows attackers to inject malicious code into the TEE, compromising its integrity.
"These attacks are a wake-up call for the industry," said Dr. Eric Charrin, a security expert at the University of Michigan. "We need to rethink our approach to cloud security and consider alternative solutions that can provide better protection against physical attacks."
Trusted execution environments (TEE) have become essential in the age of cloud computing, as they enable companies to store sensitive data and operations securely. Major cloud providers recommend using TEEs for safeguarding confidential information.
Intel's SGX and AMD's SEV-SNP are two prominent examples of TEEs, designed to provide a secure environment for executing code and storing data. However, researchers have repeatedly demonstrated vulnerabilities in these protections over the years.
The latest attacks highlight the need for more robust security measures in cloud computing. As companies continue to rely on cloud services, they must consider alternative solutions that can provide better protection against physical attacks.
In response to the attacks, Intel and AMD have issued statements acknowledging the vulnerabilities and promising to address them.
"We take these findings seriously and are working to improve the security of our SGX technology," said an Intel spokesperson. "We appreciate the research community's efforts in identifying vulnerabilities and helping us strengthen our protections."
AMD has also released a statement assuring customers that it is committed to providing secure solutions.
"The safety and security of our customers' data is our top priority," said an AMD spokesperson. "We are working closely with researchers and industry partners to address these vulnerabilities and ensure the integrity of our SEV-SNP technology."
The latest developments underscore the importance of ongoing research and collaboration in addressing the complex challenges of cloud security.
As Dr. Savage noted, "These attacks demonstrate that we need to be vigilant and continue to push the boundaries of what is possible in terms of security and privacy."
*Reporting by Arstechnica.*
